Re: [qubes-users] Set up a ProxyVM as a Wireguard instead of a OpenVPN gateway

2019-01-13 Thread Chris Laprise

On 01/12/2019 02:18 PM, Chris Laprise wrote:

On 01/12/2019 10:47 AM, Ivan Mitev wrote:



On 1/12/19 5:16 PM, Daniil Travnikov wrote:
Does anyone know how could be configured the Wireguard 
(https://www.wireguard.com/) in Proxy VM?


Maybe do you know some doc like https://www.qubes-os.org/doc/vpn/ 
where it is already described step by step?


I understand that this is new technology, but maybe someone knows 
which OS is more preferable and what is the first step in the settings?


The following thread might be helpful, although it's a bit old:

https://groups.google.com/d/msg/qubes-users/MQaePIslfY8/k0s65DfaCQAJ



Yeah, that's old and not really useful now.

Currently you can get a full Qubes wireguard setup using 
Qubes-vpn-support, which has been tested with Mullvad's wireguard service:


https://github.com/tasket/Qubes-vpn-support/

To change it from openvpn to wireguard after installation in a "proxy" 
provides-network appVM, look in the 
/rw/config/qubes-vpn-handler.service.d directory and rename 
'10_wg.conf.example' to '10_wg.conf'.


You may also have to create your proxy VM as a standalone and run 
"qvm-prefs vmname kernel ''" to blank out the kernel setting. Then boot 
and install the 'wireguard' package.



BTW, I'm working on an update to the wireguard page that is shorter and 
includes Qubes-vpn-support:


https://github.com/tasket/Qubes-vpn-support/wiki/Wireguard-VPN-connections-in-Qubes-OS

--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2be904ef-c9fb-c10d-7e4e-b5d80aacf33b%40posteo.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Set up a ProxyVM as a Wireguard instead of a OpenVPN gateway

2019-01-12 Thread Chris Laprise

On 01/12/2019 10:47 AM, Ivan Mitev wrote:



On 1/12/19 5:16 PM, Daniil Travnikov wrote:

Does anyone know how could be configured the Wireguard 
(https://www.wireguard.com/) in Proxy VM?

Maybe do you know some doc like https://www.qubes-os.org/doc/vpn/ where it is 
already described step by step?

I understand that this is new technology, but maybe someone knows which OS is 
more preferable and what is the first step in the settings?


The following thread might be helpful, although it's a bit old:

https://groups.google.com/d/msg/qubes-users/MQaePIslfY8/k0s65DfaCQAJ



Yeah, that's old and not really useful now.

Currently you can get a full Qubes wireguard setup using 
Qubes-vpn-support, which has been tested with Mullvad's wireguard service:


https://github.com/tasket/Qubes-vpn-support/

To change it from openvpn to wireguard after installation in a "proxy" 
provides-network appVM, look in the 
/rw/config/qubes-vpn-handler.service.d directory and rename 
'10_wg.conf.example' to '10_wg.conf'.


You may also have to create your proxy VM as a standalone and run 
"qvm-prefs vmname kernel ''" to blank out the kernel setting. Then boot 
and install the 'wireguard' package.



--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e0cc892c-f41b-0bc4-7fc1-ac6815401347%40posteo.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Set up a ProxyVM as a Wireguard instead of a OpenVPN gateway

2019-01-12 Thread Ivan Mitev



On 1/12/19 5:16 PM, Daniil Travnikov wrote:
> Does anyone know how could be configured the Wireguard 
> (https://www.wireguard.com/) in Proxy VM?
> 
> Maybe do you know some doc like https://www.qubes-os.org/doc/vpn/ where it is 
> already described step by step?
> 
> I understand that this is new technology, but maybe someone knows which OS is 
> more preferable and what is the first step in the settings?

The following thread might be helpful, although it's a bit old:

https://groups.google.com/d/msg/qubes-users/MQaePIslfY8/k0s65DfaCQAJ

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3a9c7b8a-8267-e603-bcc8-ba5581a06d7b%40maa.bz.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Set up a ProxyVM as a Wireguard instead of a OpenVPN gateway

2019-01-12 Thread Daniil Travnikov
Does anyone know how could be configured the Wireguard 
(https://www.wireguard.com/) in Proxy VM?

Maybe do you know some doc like https://www.qubes-os.org/doc/vpn/ where it is 
already described step by step?

I understand that this is new technology, but maybe someone knows which OS is 
more preferable and what is the first step in the settings?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e842dd0d-627a-480a-a39a-045321b5fca8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.